Advisories · Technology

Brainstorm Force SureForms.

Every CVE that names Brainstorm Force SureForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116387 CVE record

CVSS 5.3 Medium

WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability
- Brainstorm Force SureForms
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-116402 CVE record

CVSS 5.3 Medium

WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability
- Brainstorm Force SureForms
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-108495 CVE record

CVSS 6.5 Medium

WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability
- Brainstorm Force SureForms
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-85308 CVE record

CVSS 5.3 Medium

WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability
- Brainstorm Force SureForms
- Broken access control
Not analysed yet 3 Sept 2026